Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112687 | medium | 5.5 | No | This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2. An attacker on the loc... | 2026-11-03 |
| CVE-2026-111362 | medium | 5.3 | No | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. `django.contrib.gis.gdal.OGRGeometry` does not... | 2026-11-03 |
| CVE-2026-111048 | not reported | — | No | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.9, the admin/support/note_create endpoint stores... | 2026-11-03 |
| CVE-2026-110023 | medium | 5.9 | No | The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sensitive Information Ex... | 2026-11-03 |
| CVE-2026-108147 | medium | 5.3 | No | An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.19. `django.http.multipartparser.MultiPartPar... | 2026-11-03 |
| CVE-2026-105982 | high | 7.2 | No | Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute t... | 2026-11-03 |
| CVE-2026-109231 | medium | 4.3 | No | The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation Token Reuse in versi... | 2026-11-03 |
| CVE-2026-103915 | medium | 5.3 | No | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Exposure in all versio... | 2026-11-03 |
| CVE-2026-109220 | critical | 9.8 | No | The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions... | 2026-11-03 |
| CVE-2026-102435 | critical | 9.8 | No | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation i... | 2026-11-03 |
| CVE-2026-103898 | high | 8.1 | No | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and inclu... | 2026-11-03 |
| CVE-2023-31698 | medium | 5.4 | No | Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that user... | 2026-11-03 |
| CVE-2023-24908 | high | 8.1 | No | Remote Procedure Call Runtime Remote Code Execution Vulnerability | 2026-11-03 |
| CVE-2022-37959 | medium | 6.5 | No | Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability | 2026-11-03 |
| CVE-2026-83131 | high | 7.7 | No | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported ver... | 2026-11-03 |
| CVE-2026-83133 | high | 7.5 | No | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 1... | 2026-11-03 |
| CVE-2026-83232 | critical | 9.8 | No | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versio... | 2026-11-03 |
| CVE-2026-83327 | critical | 9.8 | No | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that... | 2026-11-03 |
| CVE-2026-83423 | high | 8.8 | No | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affe... | 2026-11-03 |
| CVE-2026-84490 | low | 2.0 | No | This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to... | 2026-11-03 |